Search: CVE-2026-46571

An out-of-bounds read vulnerability exists in NTFS-3G versions before 2026.7.7 in the ntfs_fix_file_name() function. This flaw can be triggered by performing a readlink operation on a specially crafted corrupted NTFS file, potentially allowing an attacker with local privileges to read sensitive information from the process memory of ntfs-3g. The vulnerability has a medium severity rating with a CVSS score of 5.5.